HR 5078
Passed a chamber
Extends the State and Local Cybersecurity Grant Program through 2033 and expands the grants to cover operational technology and artificial intelligence systems used by state and local governments.
Official title: PILLAR Act
Timeline each lane is a chamber; dates pull from congress.gov actions
House
Introduced
02-SEP-2025
Referred
02-SEP-2025
Approved by committee
03-SEP-2025
Reported
12-NOV-2025
On the calendar
12-NOV-2025
Passed
17-NOV-2025
Senate
Received
18-NOV-2025
- Extends the program's authorization from 2025 to 2033 and raises the federal share of grant costs to 60 percent for eligible entities and 70 percent for multi-entity groups.
- Raises the federal share to 65 percent and 75 percent from fiscal year 2028 for entities that put multi-factor authentication in place on critical infrastructure by October 1, 2027.
- Directs grant-funded work to cover operational technology and artificial intelligence systems, and bars purchases of products that do not follow CISA guidance, including products from foreign entities of concern.
- Requires states to pass grant funds to local governments, lets local governments ask DHS for direct funding if a state misses a 60-day deadline, and requires a GAO review every three years.
Covers an older version. The newest CRS summary describes the bill as of "Introduced in House" (02-SEP-2025); the text has changed since (Engrossed in House, 17-NOV-2025).
CRS is the Library of Congress's nonpartisan research office. Read it on congress.gov- Homeland Security Committee (House)
- Cybersecurity and Infrastructure Protection Subcommittee
- Homeland Security and Governmental Affairs Committee (Senate)
Science, Technology, Communications
■ 2 R■ 2 D
2 Republicans
2 Democrats